Token Universe

If you are the kind of person who genuinely enjoys researching and experimenting with Windows security, then perhaps you should find out more about Token Universe. The specialized tool provides a GUI that enables you to easily create, view and edit access tokens. Moreover, it can also be used to spawn processes, manage Local Security Authority and perform other security gimmicks.

Upon launch, you should be able to view a list of the active processes and tokens and you can simply right click to access more information about them. More in this case entails details ranging from object address and granted access to groups, privileges, audit overrides and default DACL.

Creating a new token can be done from the menu with the same name, where you select the Logon user. After you select the user, you can choose the Logon session, owner, token group, source, name, LUID and select from the available policies post creation.

As you probably hinted, the tool provides several ways to obtain tokens, including here opening processes or threads, querying terminal session token, logging into virtual accounts, duplication or impersonating BITS, just to name a few. Viewing and editing options are going to be available based on the method the token was obtained.